Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/BW4BmUKCyDozy984WvALErmmyWk.roa
File: BW4BmUKCyDozy984WvALErmmyWk.roa (raw, json)
Hash identifier: NoDLKqIq52rdkg1nyOBS52VEKKgBzHcZpmlA/5oZ2N4=
Subject key identifier: 05:6E:01:99:42:82:C8:3A:33:CB:DF:38:5A:F0:0B:12:B9:A6:C9:69
Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial: 019523B5D415A3B429DB4C21B6826D243BBA
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/BW4BmUKCyDozy984WvALErmmyWk.roa
Signing time: Thu 20 Feb 2025 14:14:33 +0000
ROA not before: Thu 20 Feb 2025 14:14:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200908
IP address blocks: 45.144.228.0/24 maxlen: 24
45.144.229.0/24 maxlen: 24
45.144.230.0/24 maxlen: 24
45.150.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:b5:d4:15:a3:b4:29:db:4c:21:b6:82:6d:24:3b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
Validity
Not Before: Feb 20 14:14:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=056e01994282c83a33cbdf385af00b12b9a6c969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:7d:a2:1a:17:c9:ba:c0:14:e6:12:4d:5d:
fe:93:06:6e:05:ca:f1:dd:1b:9f:f6:e8:3f:d9:3e:
f1:51:3d:5a:28:a4:ad:00:79:2a:af:bf:e3:2e:d0:
98:85:03:6a:d3:43:3f:40:2e:cc:51:eb:01:5e:44:
3a:e9:10:e3:8f:b9:82:96:35:1e:35:99:5d:59:84:
71:9c:7a:c2:0b:15:95:f0:80:7d:6c:39:c8:b9:3b:
62:49:02:e8:50:2f:c0:9a:59:bf:96:66:36:ca:44:
c3:cd:2b:8a:77:ff:7d:28:c8:0c:49:a9:63:e3:55:
fb:15:c2:99:16:00:36:7e:a8:41:d5:9b:99:e2:51:
a6:19:6d:9a:fa:8b:0f:63:63:e1:29:37:17:e5:6c:
d4:e2:28:45:78:0e:02:b8:57:aa:51:9d:70:eb:20:
b2:fd:67:1a:45:86:33:5a:de:da:71:14:18:9a:60:
34:13:83:db:bb:1a:e6:6e:e8:1a:8d:60:10:44:c0:
d6:6c:f1:31:fd:0f:81:75:de:a4:15:26:41:9b:11:
bc:7c:e1:b6:48:f8:5c:60:26:6c:87:25:1e:c1:fd:
e0:74:ad:30:ac:6a:f9:23:34:8d:06:9d:32:3f:90:
2e:f7:19:e0:0c:f2:49:06:92:14:b9:a4:97:64:f5:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:01:99:42:82:C8:3A:33:CB:DF:38:5A:F0:0B:12:B9:A6:C9:69
X509v3 Authority Key Identifier:
keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/BW4BmUKCyDozy984WvALErmmyWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.228.0-45.144.230.255
45.150.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:c8:7f:85:c7:25:4f:0b:81:6f:22:a2:c4:8b:9d:a1:21:af:
dc:7b:0a:ac:26:2e:52:50:48:13:97:a4:de:9a:4f:4b:47:16:
b1:3a:33:c1:5a:ee:99:81:e5:15:b3:13:81:b6:71:b5:14:d6:
d8:80:e2:d5:4b:18:d0:44:19:00:b9:31:69:d2:f8:f8:00:f7:
dd:db:a1:01:f2:05:ff:78:9b:bc:b0:05:dc:62:32:04:d2:c4:
b1:02:01:1d:47:7e:17:e8:6a:07:40:a9:b5:b3:3b:68:34:46:
b1:d9:ce:83:98:3e:86:07:fd:2d:b9:99:14:d5:3f:7c:68:4e:
63:40:9e:22:ed:9f:51:af:be:83:b5:e2:69:a0:da:9a:1f:f6:
34:40:38:b9:fc:bf:72:14:0a:8d:dc:a3:9f:34:14:c1:50:46:
61:92:12:81:b0:69:ba:2e:8d:bd:da:15:60:29:b9:2e:62:5b:
37:9c:b0:d7:46:c5:14:2b:b6:d8:b5:40:d9:31:83:32:74:6d:
58:cc:63:81:de:a6:1b:35:2e:78:36:6a:c6:6d:3b:78:d7:f9:
cd:e5:11:ce:f5:c9:3a:e9:d6:d5:ba:05:09:32:41:d0:8a:5e:
23:d9:c4:9d:3e:38:ec:0e:1d:b6:33:12:34:91:df:45:37:0d:
54:b4:8f:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:20:27 2025 by rpki-client